pfSense

Fix WireGuard add/next name behavior. Fixes #11407

• No need to set index when creating a new entry
• WireGuard interface name label was assuming array index=wg if name
  which was incorrect

Remove what I suspect is a debug leftover

Add brackets around IPv6 endpoint address. Issue #11338

Fix WireGuard interface name assignment. Fixes #11323

Only set the name when it's empty/unset (e.g. when first created),
automatically determine the next available wg interface number.

WireGuard: Always derive public key. Issue #11322

If the user enters a different private key, using the supplied public
key would lead to a mismatch. So always derive the public key when saving.

WireGuard: Make pubkey read only, populate automatically. Fixes #11322

While here, add a link to copy the public key to the clipboard.

Improve WireGuard port validation. Fixes #11311

Attempt to use peer wg address if possible for gateway. Implements #11300

Rework WireGuard tonatsubnets/unbound ACL entries. Fixes #11304

Init var before use. Fixes #11307

Allowe peer port < 512

Allowe listen port < 512

Assume default WG port if empty. Fixes #11286

WireGuard assignment/disable behavior improvements. NG 5518

• Do not allow a WireGuard instance to be removed while assigned
• Do not allow a WireGuard instance to be disabled while assigned
• Destroy the WireGuard interface when disabled

Add OS routes using WireGuard Peer AllowedIPs. Part of NG 5437

Remove WireGuard peernwks field which is not needed. Part of NG 5437

Fix some bad WireGuard capitalization

Automatic WireGuard interface gateways. Part of NG 5437

Fix copyright notices

Remove commented out code

Spell WireGuard properly

Fixed #5486 by making peer endpoint and port optional

Added new Wireguard config fields peernwks and peerwgaddr per #5437

wg: Configure static routes

When configuring a wg tunnel, update static routes associated with that
interface

Update copyright year

Ticket #5186: Re-create config files during boot

Ticket #5186: Implement is_wg_enabled()

Ticket #5186: Fix comment

#5186 - Revised peer configuration to use 'wgpeer' rather than 'peer'

wg: Do not check assigned interface (Ticket #5186)

When saving changes on wireguard, do not check address conflict on
interface assigned to that tunnel, otherwise, it will not allow user to
save any modification

wg: Use a more generic function to detect IP address

wg: Remove extra spaces

wg: isset() just before is_array() is redundant

wg: unlink_if_exists() can deal with glob matches

wg: Style fixes

wg: Fix gettext() calls

wg: Simplify logic

Fix Wireguard tunnel save with zero peers

Completed revision of wg config edit fors

Added allowed ip validation

#5186 fixed validation issues as requested

#5186 - Provide 'generate PSK' butoon. Some fixes to validation

#5186 Added keepalive units, clarified Address text, added incremented port placeholder, minor validation changes

Added user input validation for Wireguard config. Marked certain values as required

Add the tunnel address to WG interface.

Wireguard support is now functional.

Fix the wireguard configuration file, start tunnels at boot.

Add the Endpoint port, fix the configuration permissions.

Remove the WG tunnel when a tunnel is removed.

Added support for wireguard pre-shared keys

Optionally generate keys in JSON

Added ability to generate a new public/private key pair for hte interface. Public key is displayed on the tunnel edit form

Fixes the saving of peers settings in GUI.

The previous commits had a few mistakes which were fixed in here.

Fixes the WG configuration path and creation.

The GUI is now working as expected to add, edit and save the WG tunnel entries.

Rename the Wireguard peers entries in configuration XML to 'peer'.

'peer' is already properly handled by the XML routines as a list entry, which
is not the case of 'peers'.

This fixes the saving of peers settings in GUI.

Fix the file name in header.

Remove the mention from m0n0wall, this code was created for pfSense.

Moved wg.inc to proper location